FBI Offers New IoT Security Tips

A new article from the FBI offers insight into IoT risks and ways to reduce them.

Following the FBI's May request to router owners to reboot their devices, the bureau has released a "Security Tip" about risks associated with the Internet of Things (IoT). Included among suggestions to be alert to unusual increases in network traffic and reminders about the wisdom of firmware updates are statements regarding the importance of the IoT and the true nature of the risks involved.

Security professionals, who likely won't find anything surprising in the tips, might want to share the document with non-IT employees. The article, which begins with a statement that IoT devices are defined by their ability to " ... talk to other machines and trigger additional actions," briefly walks through the dangers posed by these connected devices and the data they can access.

The suggestions offered are basic but important, and could require help from IT staff for employees to implement. For organizations in which employees work from home, the FBI's latest security primer can be the start of a valuable conversation.

Black Hat USA returns to Las Vegas with hands-on technical Trainings, cutting-edge Briefings, Arsenal open-source tool demonstrations, top-tier security solutions and service providers in the Business Hall. Click for information on the conference and to register.

Dark Reading's Quick Hits delivers a brief synopsis and summary of the significance of breaking news events. For more information from the original source of the news item, please follow the link provided in this article. View Full Bio

Encryption and access controls are considered to be the ultimate safeguards to ensure the security and confidentiality of data, which is why they're mandated in so many compliance and regulatory standards. While the cybersecurity market boasts a wide variety of encryption technologies, many data breaches reveal that sensitive and personal data has often been left unencrypted and, therefore, vulnerable.

An open redirect was discovered in Symfony 2.7.x before 2.7.50, 2.8.x before 2.8.49, 3.x before 3.4.20, 4.0.x before 4.0.15, 4.1.x before 4.1.9 and 4.2.x before 4.2.1. By using backslashes in the `_failure_path` input field of login forms, an attacker can work around the redirection target restricti...

A flaw was found in the Linux kernel in the NFS41+ subsystem. NFS41+ shares mounted in different network namespaces at the same time can make bc_svc_process() use wrong back-channel id and cause a use-after-free. Thus a malicious container user can cause a host kernel memory corruption and a system ...

An issue was discovered on D-Link DVA-5592 A1_WI_20180823 devices. If the PIN of the page &quot;/ui/cbpc/login&quot; is the default Parental Control PIN (0000), it is possible to bypass the login form by editing the path of the cookie &quot;sid&quot; generated by the page. The attacker will have acc...